Delta Electronics Diaenergie vulnerabilities, page 4
69 vulnerabilities
Known vulnerabilities in Delta Electronics Diaenergie, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-28029delta electronicsdiaenergie+1
EPSS score0.65%
Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authorization and access privileged functionality.CVE-2024-28171delta electronicsdiaenergie+1EPSS score0.65%
It is possible to perform a path traversal attack and write outside of the intended directory. If a file name is specified that already exists on the file system, then the original file will be overwritten.CVE-2024-28040delta electronicsdiaenergie+1EPSS score8.48%
SQL injection vulnerability exists in GetDIAE_astListParameters.CVE-2024-34032delta electronicsdiaenergie+1EPSS score8.74%
Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the GetDIACloudList endpoint. An authenticated attacker can exploit this issue to potentially compromise the system on which DIAEnergie is deployed.CVE-2024-34031delta electronicsdiaenergie+1EPSS score0.50%
Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the script Handler_CFG.ashx. An authenticated attacker can exploit this issue to potentially compromise the system on which DIAEnergie is deployed.CVE-2024-34033delta electronicsdiaenergie+1EPSS score1.00%
Delta Electronics DIAEnergie has insufficient input validation which makes it possible to perform a path traversal attack and write outside of the intended directory. If a file name is specified that already exists on the file system, then the original file will be overwritten.CVE-2024-23975delta electronicsdiaenergie+1EPSS score8.48%
SQL injection vulnerability exists in GetDIAE_slogListParameters.CVE-2024-23494delta electronicsdiaenergie+1EPSS score8.48%
SQL injection vulnerability exists in GetDIAE_unListParameters.CVE-2023-0822delta electronicsdiaenergie+1EPSS score0.63%
The affected product DIAEnergie (versions prior to v1.9.03.001) contains improper authorization, which could allow an unauthorized user to bypass authorization and access privileged functionality.